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We demonstrate a multipartite protocol to securely distribute and reconstruct a quantum state. A secret quan- 
tum state is encoded into a tripartite entangled state and distributed to three players. By collaborating, any two 
of the three players can reconstruct the state, whilst individual players obtain nothing. We characterize this 
(2, 3) threshold quantum state sharing scheme in terms of fidelity, signal transfer and reconstruction noise. We 
demonstrate a fidelity averaged over all reconstruction permutations of 0.73 ± 0.04, a level achievable only 
using quantum resources. 



Secret sharingfH is a powerful technique in computer sci- 
ence, which enables secure and robust communication in in- 
formation networks, such as the internet, telecommunication 
systems and distributed computers. The security of these net- 
works can be enhanced using quantum resources to protect the 
information. Such schemes have been termed quantum secret 
sharing\2\. Many applications in quantum information sci- 
ence, however, requke the distribution of quantum states. One 
such example are quantum information networks, which are 
expected to consist of nodes where quantum states are created, 
processed and stored, connected by quantum channelsQl- It is 
of paramount importance that the quantum channels in these 
networks allow the robust and secure distribution of quantum 
states between nodes. Cleve et al. [4J proposed the secret shar- 
ing of quantum states as a protocol that provides these ca- 
pabilities, overcoming failures or conspiracies by nodes. We 
term this quantum state sharing to differentiate from the quan- 
tum secret sharing of classical information. In (fc,n) thresh- 
old quantum state sharing[4], the "dealer" node encodes a se- 
cret state into an ?i-party entangled state and distributes it to 
n "player" nodes. Any k players (the access structure) can 
collaborate to retrieve the quantum state, whereas the remain- 
ing n — k players (the adversary structure), even when con- 
spiring, acquire nothing. This scheme provides quantum in- 
formation networks with a secure framework for distributed 
quantum computation and quantum communication. 

The original quantum state sharing scheme by Cleve et 
al. was formulated for discrete states and requires the 
control and coupling of qudits (d-dimensional extensions 
of qubits), which is extremely experimentally challeng- 
ing. In the continuous variable regime, however, quantum 
state sharing is feasible utilizing Einstein-Podolsky-Rosen 
(EPR) entanglementfs'l, an experimentally accessible quan- 
tum resource|6, 7]. We demonstrate (2, 3) threshold quantum 
state sharing in this regime. In our scheme, a secret coher- 
ent state is encoded into a tripartite entangled state and dis- 
tributed to three players. We demonstrate that any two of 
the three players can form an access structure to reconstruct 
the state. The state reconstruction is characterized in terms 
of fidelity, signal transfer, and reconstruction noise. These 
measures show a direct verification of our tripartite continu- 
ous variable entanglement. As coherent states form an over- 



complete basis for all quantum states, arbitrary states can be 
shared by this scheme. 

The quantum states of interest in this paper reside at the fre- 
quency sidebands of an electromagnetic field. In the Heisen- 
berg picture of quantum mechanics, a quantum state can be 
represented by the field annihilation operator a = {X^ + 
iX-)/2, where X^ = (X^)+dX^ are the amplitude (+) 
and phase (-) quadratures, with variances of ~ ((X^)^). 
In our dealer protocol, the dealer interferes the secret state 
flin with one of a pair of EPR entangled beams oepri on a 
1:1 beam splitter (Fig.[D- The two output fields and the sec- 
ond entangled beam aEPR2 form the three shares which are 
distributed to the players. The entangled state ensures that 
the secret is protected from each player individually and is 
generated by interfering a pair of amplitude squeezed beams 
cisqzi and asqz2|7]. The dealer can further enhance the secu- 
rity of the scheme by displacing the coherent arnplitudes of 
the shares with correlated Gaussian white noisellsl]. Choos- 
ing the Gaussian noise to have the same correlations as the 
quadrature entanglement, the shares can be expressed as 

ai = (ain + aEPRi + 57V)/V2 (1) 
02 = (ain-aEPRi-'5A/')/V2 (2) 
as = aEPR2 + SAf* (3) 
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FIG. 1: Schematic of the (2, 3) quantum state sharing scheme, ipin'- 
secret quantum state, OPA: optical parametric amplifier, G: elec- 
tronic gain, AM: amplitude modulator, LO: optical local oscilla- 
tor. x:y: beam splitter with reflectivity x/(x + y) and transmitivity 

y/(x+y). 
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where 5M = {SN~^ +i5N~)/2 represents the Gaussian noise 
with mean (SN^) = and variance {{SN^)'^) = Vat, and * 
denotes the complex conjugate. 

The reconstruction protocol used for the (2, 3) quantum 
state sharing scheme is dependent on the corresponding access 
structure (Fig.Q. The access structure formed when players 
1 and 2 collaborate, henceforth denoted {1,2}, reconstructs 
the secret quantum state by completing a Mach-Zehnder inter- 
ferometer using a 1:1 beam splitter|51. The access structures 
{2,3} and {1,3} reconstruct the quantum state by utilizing a 
2: 1 beam splitter and an electro-optic feedforward loop| 8]. In 
the latter protocol, combining the shares on the beam splitter 
with appropriate relative phase reconstructs the phase quadra- 
ture of the secret state on one of the beam splitter outputs. In 
contrast, the amplitude quadrature has additional noise as a re- 
sult of this process. This noise, however, is correlated with the 
amplitude quadrature of the other beam splitter output, which 
is detected. The resulting photocurrent is fedforward to dis- 
place the amplitude quadrature of the first output. Assuming 
no losses, the quadratures of the reconstructed secret can then 
be expressed as |8'5 
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i {g+- V3) {SX-^,- 5X-^,.^ ) + (V3 - g+)5N+{A) 



+ ^ ( 1 - V3g+ ) iSX+,^ + 6X+,^ ) 
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(5) 
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where = (^(^it)/(^it) optical quadrature gains. 

The phase quadrature gain g^ = l/\/3 is set by the 2:1 
beam splitter, whilst the amplitude quadrature gain g+ ~ 
{I/VS + G/VQ) has an additional term which is a function 
of the electronic feedforward gain G. We refer to the specific 
gain of g^g^ = 1 as the unitary gain point. At unitary gain 
and in the limit of perfect squeezing, the quadratures of the 
reconstructed state are given by SX^^^ — {y/3)^^6X^^. This 
state is directly related to the secret state via a local unitary 
parametric operation. Although not in the same form as the 
secret state, such a reconstructed state is only achievable us- 
ing entanglement. On the other hand, the unitary parametric 
operation is local and requires no entanglement. Therefore, 
the essence of the reconstruction protocol is contained within 
the feedforward scheme. 

In our experiment we use a Nd:YAG laser producing a co- 
herent field at 1064nm to provide a shared time frame between 
all parties; to yield the dealer secret state, produced by dis- 
placing the sideband vacuum state of the laser field using an 
amplitude and a phase modulator at 6.12MHz; and to pro- 
duce two amplitude squeezed states generated in hemilithic 
MgO:LiNb03 optical parametric amplifiers (OPAs) pumped 
with 532nm light. The output fields of each OPA are squeezed 
4.5 ± 0.2dB below the quantum noise limit. These squeezed 
beams are interfered on a 1:1 beam splitter with an observed 
visibility of 99.1 ± 0.2%. The beam splitter outputs are EPR 
entangled and satisfy the wave-function inseparability cri- 
terion {iSX+p^,+SX+p^^)^){{6X^P^,-dX^P^^^)^)/4 = 



0.44 ± 0.02 < 110, [l3l. To enhance the security of the 
secret state against the adversaries, the coherent quadrature 
amplitudes of the entangled beams are displaced with Gaus- 
sian noise of variance Vn — 3.5 ± O.ldB. Experimentally, 
this noise can be actively applied using electro-optic mod- 
ulation techniques, but in our case it appears naturally as a 
result of de-coherencefl^. A homodyne detector is used to 
characterize the secret, adversary and reconstructed quantum 
states using a configuration of removable mirrors. To en- 
sure accurate results, the total homodyne detection efficiency, 
'7hom — 0.89±0.01, is inferred out of each measurement. 

We characterize the quality of the state reconstruction 
for the access and adversary structures using fidelity — 
('0in|pout|'0in), which mcasurcs the overlap between the se- 
cret and reconstructed quantum states iTlll . Assuming that all 
fields involved have Gaussian statistics and that the secret is a 
coherent state, the fidelity can be expressed in terms of exper- 
imentally measurable parameters as 



^ r,„-(fe++fc-)/4 



T = 2e 
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(6) 



where fc^ = (Xi„)2(l-g^)2/(l + ) . In our experiment, 
the fideUty for {1,2} can be determined directly; however, for 
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FIG. 2: Experimental results for the {1,2} access structure, (a) and 
(b) show the spectra of the amplitude and phase quadrature vari- 
ances for the secret (input, blue/dark grey) and reconstructed (output, 
green/light grey) quantum states. A f is the offset from the signal fre- 
quency at 6.12 MHz. Resolution Bandwidth = 1 kHz, Video Band- 
width = 30 Hz. (c) Standard deviation contours of Wigner functions 
of the secret (blue/dark grey) and reconstructed (green/light grey) 
quantum states, (d) Measured fidelity as a function of gain deviation 
= ((^o+ut) - (^it))' + ((X-- J - Q(r))'- (d) Grey area highlights 
the accessible fidelity region. Points plotted are from six different 
experimental runs. 
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{2,3} and {1,3} a unitary parametric transformation must be 
applied before a meaningful fidelity is obtained. This unitary 
transform can be applied either optically or a posteriori. The 
— (\/3)^^(5X^,j, so in the ideal case 
Under ideal conditions and at unitary gain, 
any one of the access structures can achieve T — \ corre- 
sponding to perfect reconstruction of the secret quantum state, 
whilst the corresponding adversary structure obtains T — ^. 
When no entanglement is used, the maximum fidelity 

1/2, 



final state is then bX^^^^ 



achievable by {2,3} and {1,3} is Tf^l^ 



77c las 
■^{1,3} 



whilst {1,2} can still achieve .?^|''*2} ~ 1' ^° '■^^ average fi- 
delity achieved by all permutations of the access structure 
cannot exceed T'^^ = 2/3. This defines the classical bound- 
ary for (2, 3) threshold quantum state sharing. Note that for 
general (fc,7i) threshold quantum state sharing of a coherent 
state, independent of the dealer protocol, the maximum av- 
erage fidelity achievable without entanglement resources is 
•^avg k/n. 

With the {1,3} and {2,3} protocols being equivalent, our 
(2, 3) threshold quantum state sharing scheme is demon- 
strated through the implementations of the {1, 2} and {2, 3} 
reconstruction protocols. Figure|2lshows the noise spectra and 
corresponding inferred Wigner function standard deviation 
contours for the secret and reconstructed state for the {1,2} 
protocol. The fidelity obtained from these noise spectra is 
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FIG. 3: Experimental results for the {2,3} access structure, (a) and 
(b) show the spectra of the amplitude and phase quadrature vari- 
ances for the secret (input, blue/dark grey) and reconstructed (output, 
green/light grey) quantum states, (c) Standard deviation contours 
of Wigner functions of the secret (blue/dark grey) and reconstructed 
(green/light grey) quantum states. The dashed circle represents the 
quantum state (JX^^^a = (\/3)^^5X^t after the a posteriori local 
unitary parametric operation. 



^{1,2} = 0.93±0.03 with g+ = 0.94±0.01 and g- = 0.97±0.01. 
The corresponding adversary structure {3} gets a fidelity of 
J- {3,] ~ since the share contains no component of the secret 
state. Figure|2l(d) shows several measured fidelity points as a 
function of phase space distance, r, between the coherent am- 
plitudes of the secret and reconstructed states. Each fidelity 
point has a non-zero distance due to mode mismatch, optical 
losses and imperfect phase locking. 

Similarly, Figure |3l shows an example of the secret and re- 
constructed state for the {2,3} protocol. In this case, to al- 
low a direct comparison between the secret and reconstructed 
states, the inferred Wigner function standard deviation con- 
tour of the reconstructed state after the a posteriori local uni- 
tary parametric operation is also shown. Figure |2 shows the 
measured fidelity for a range gains. Around the unitary gain 
point, we achieve a fidelity of .^^{2,3} = 0.63 ±0.02 with 
= 1.02 ± 0.03. The corresponding adversary structure 
{1} achieves a fidelity of only = 0.03±0.01. The quan- 
tum nature of our protocol is demonstrated by the fidelity av- 
eraged over all the access structures T^vg — 0.74±0.04, which 
exceeds the classical limit T'^^ = 2/3. 

Fidelity is a single state dependent measure of the efficacy 
of quantum information protocols. There are alternative mea- 
sures which provide complementary information about these 
processes. One obvious technique is to measure the signal 
transfer to (T), and the additional noise on (V), the recon- 
structed state ! 1211 . Such analysis has been used to charac- 
terize quantum non-demolition i 13t and quantum teleportation 
experiments! 14|. Unlike the fidelity measure, both T and V 
are invariant to unitary transformations of the reconstructed 
state. Therefore, for the T and V analysis, an a posteriori uni- 




FIG. 4: Experimental fidelity for the {2,3} access structure as a 
function of the product of g^g^ . Dashed line: calculated theoretical 
curve with squeezing of —4.5 dB, added noise of +3.5 dB, elec- 
tronic noise of —13 dB with respect to the quantum noise limit, and 
feed forward detector efficiency of 0.93. Solid line and dotted lines: 
experimental fidelity for the adversary structure and error bar. Grey 
area highlights the classical boundary for the access structure. 
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tary transform is not required. The signal transfer is given by 
T = T+ + T-, where T± = SNR^^t/SNR| are the quadra- 
ture signal transfer coefficients, with SNR being the stan- 
dard signal-to-noise ratios. The additional noise is given by 
V = V+V,-, where F± = V,t, ~ \ {SX+dX+J\yV,t, ai-e the 
conditional variances. Experimentally, the signal-to-noise ra- 
tios that define T can be obtained from our measured noise 
spectra (Fig.|2land|3}, whilst can be determined from the 
output quadrature variance and the optical quadrature gains 
V^^ — V^^^ — {g^Y- In the ideal case, any one of the access 
structures can achieve perfect state reconstruction with T — 2 
and V = 0, whilst the corresponding adversary structure ob- 
tains no information with T = and V = oo. 

Figure |5] (inset) shows the experimental T and V points for 
the {1,2} protocol. We measure a best state reconstruction 
of T{i_2} = 1-77 ± 0.05 and V{i^2} = 0.01 ± 0.01. Both of 
these values are close to optimal, being degraded only by opti- 
cal losses and experimental inefficiencies. Similarly, Figure|5l 
shows the points for the {2,3} protocol for a range of gains, 
together with the corresponding adversary structure {1}. The 
majority of the experimental points are in agreement with the 
theoretical prediction, with the discrepancies accountable for 
by drifts in our control system. The accessible region for 
the {2,3} protocol without entanglement is illustrated by the 
shaded region. The quantum nature of the state reconstruction 
is demonstrated by the experimental points which exceed this 
classical region. For the {2,3} protocol we measure a low- 
est reconstruction noise of V{2,3} = 0.46 ± 0.08 and a largest 
signal transfer of X{2.3} ~ 1-03 ± 0.05. Points with T > 1 ex- 



ceed the information cloning limitfl4^ and demonstrate that 
the {2,3} protocol has better access to information encoded 
on the secret state than any other parties. The adversary struc- 
ture obtains a mean r{i} =0.41±0.01 and V{i} =3.70±0.08. 
The separation of the adversary structure T and V points from 
that of the {2,3} protocol in Figure [S] illustrates that in such 
a protocol the access structure performs far better than any 
adversary structure. 



Our experimental demonstration of (2, 3) threshold quan- 
tum state sharing is the first application of continuous variable 
tripartite entanglement. Furthermore, it is extendable to an 
arbitrary (fc, n) scheme, without a corresponding scale-up of 
the required quantum resources! 15 1 . The implementation of 
quantum state sharing broadens the scope of quantum infor- 
mation networks allowing quantum communication between 
multiple nodes, whilst providing security against malicious 
parties in the network as well as node and channel failures. 
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FIG. 5: Experimental signal transfer (T) and additional noise (V) 
for the {2,3} access structure (green/light grey circles), and the ad- 
versary structure (red/dark grey diamonds). Solid line: calculated 
theoretical curve for varying gain with same parameters as in Fig- 
ure|4] Triangle symbol: unitary gain point for the {2,3} access struc- 
ture. Square symbol: calculated theoretical point for the adversary 
structure. Grey area: the classical region for the {2,3} access struc- 
ture, (inset) Experimental T and V for the {1,2} access structure 
(green/light grey circles) and the theoretical point (black circles). 



[1] A. Shamir, Comm. of the ACM 12, 612 (1979). 

[2] M. Hillery, V. Buzek and A. Berthiaume, Phys. Rev. A 59, 1829 

(1999); A. Karlsson, M. Koashi and N. Imoto, Phys. Rev. A 59, 

162 (1999); W. Tittel, H. Zbinden and N. Gisin, Phys. Rev A 

63, 042301 (2001). 
[3] J. I. Cirac, P. ZoUer, H. J. Kimble and H. Mabuchi, Phys. Rev. 

Lett. 78, 3221 (1997). 
[4] R. Cleve, D. Gottesman and H-K. Lo, Phys. Rev Lett. 83, 648 

(1999). 

[5] T. Tyc and B. C. Sanders, Phys. Rev A 65, 42310 (2002). 

[6] Z. Y. Ou, S. F. Pereira, H. J. Kimble and K. C. Peng, Phys. Rev 

Lett. 68,3663 (1992). 
[7] W. P Bowen, R. Schnabel, P K Lam and T. C. Ralph, Phys. 

Rev Lett. 90, 043601 (2003). 
[8] A. M. Lance, T. Symul, W. P Bowen, T. Tyc, B. C. Sanders and 

P K. Lam, New J. of Phys. 5, 4.1 (2003). 
[9] A. Furusawa, et al. Nature 282, 706 (1998). 
[10] L-M. Duan, G. Giedke, J. I. Cirac and P Zoller, Phys. Rev Lett. 

84, 2722 (2000). 
[11] B. Schumacher, Phys. Rev A 51, 2738 (1995). 
[12] T. C. Ralph and P K. Lam, Phys. Rev Lett. 81, 5668 (1998) 
[13] J. -Ph. Poizat, J. -F. Roch, and P. Grangier, Ann. Phys. (Paris) 

19, 265 (1994). 
[14] W. P Bowen, et al, Phys. Rev A 67, 032302 (2003). 
[15] T. Tyc, D. J. Rowe and B. C. Sanders, /. P/m. A:Math. Gen. 
36, 7625 (2003). 

[16] This aspect of de-coherence will be described in detail in a later 
publication. 



